pkg:PyPI/pdm

All known vulnerabilities

• HIGH7.8CVE-2023-45805PDM Trojan Lockfile
  from 0, <= 2.9.3
• —CVE-2026-47781PDM: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing
  from 0, < 2.27.0
• —CVE-2026-47764PDM wheel installation leads to Path Traversal via overridden write_to_fs
  from 0, < 2.27.0
• —CVE-2026-47763PDM: Project-Local State and Config Writes Follow Symlinks
  from 0, < 2.27.0